• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
SSH helper, then? (Was: I really should check my glasses before reading the Firewall pref pane)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SSH helper, then? (Was: I really should check my glasses before reading the Firewall pref pane)


  • Subject: SSH helper, then? (Was: I really should check my glasses before reading the Firewall pref pane)
  • From: Rui Carmo <email@hidden>
  • Date: Sat, 1 Feb 2003 23:35:37 +0000

On Sabado, Fev 1, 2003, at 22:15 Europe/Lisbon, Randal L. Schwartz wrote:

"Rui" == Rui Carmo <email@hidden> writes:

According to "man Xserver", you should be able to pass "-nolisten" to get it to bind to only the Unix-domain socket. That's pretty secure.


Yep, but if we're going to have a GUI launcher for configuring basic stuff like keyboard layouts (hint, hint), I guess that could be rolled into it, and set to "on" by default.


The first thing any user will do after installing X11 is... "xhost +". He/she won't activate the firewall (see my other post where I made a jackass of myself by thinking the checkboxes detailed "blocked" ports), or even bother checking that X access permissions are minimally restrictive.

Come to think of it, some sort of SSH X forwarding helper (i.e., a pretty Cocoa dialog box that would let users connect to a remote server via SSH and enable X forwarding for them) would be damn useful to make sure newbie users did things the right way.

R.
_______________________________________________
x11-users mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/x11-users
X11 for Mac OS X FAQ: http://developer.apple.com/qa/qa2001/qa1232.html
Report issues, request features, feedback: http://developer.apple.com/bugreporter
Do not post admin requests to the list. They will be ignored.

References: 
 >Re: Do consider blocking port 6000 on the next installer (Was: Re: setenv in X11) (From: email@hidden (Randal L. Schwartz))

  • Prev by Date: Re: Do consider blocking port 6000 on the next installer (Was: Re: setenv in X11)
  • Next by Date: Re: Raise-on-Focus
  • Previous by thread: Re: Do consider blocking port 6000 on the next installer (Was: Re: setenv in X11)
  • Next by thread: Re: Problems with current Apple X11 package
  • Index(es):
    • Date
    • Thread